Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
22-07-2024 08:37
General
-
Target
87dedee413e86ee44d63982e99af9f30N.exe
-
Size
45KB
-
MD5
87dedee413e86ee44d63982e99af9f30
-
SHA1
71c5397d0dbd5dcfd667af4619a6c9f29432a467
-
SHA256
89e999bdf19fed1ad07918313d7ab68c569d4b3af841cb2b25eb8580293db9f2
-
SHA512
a714c21041e791794aa6f9cdb5bb0f8ff3876d18644745ccb9cc4a61244b0608b8aa1931a50759bc80caa8a89f6a4977126091aaa1b25fb72577e590cfc2ed1a
-
SSDEEP
768:qLkGjHw+P/KMb8v8K+mlAH02I5nuQBkQwSnynZ63Z5Sbftta1VUgTKsoD:ai28v8KQH02CTi2nRp5Sbf21PTi
Score
10/10
Malware Config
Extracted
Family
xenorat
C2
localhost
Mutex
testing 123123
Attributes
-
delay
1000
-
install_path
nothingset
-
port
1234
-
startup_name
nothingset
Signatures
-
XenorRat
XenorRat is a remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\87dedee413e86ee44d63982e99af9f30N.exe"C:\Users\Admin\AppData\Local\Temp\87dedee413e86ee44d63982e99af9f30N.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB